Congegni
/
sintonia
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
sintonia/worker/install/systemd/libretime-worker.service

39 lines
849 B
SYSTEMD
Raw Normal View History

Vagrant Debian support (and experimental CentOS) This changes the Vagrant setup to support multiple installations as multiple boxes. In addition to Ubuntu Vagrant can now be used to install on Debian as well as on CentOS. I took the chance to clean up the .deb install a bit and backported analyzer and celery to SysV proper so it runs there. Some of the distro specfics were moved to the install script from the python setup scripts to acheive this. For the CentOS support I added a rather involved OS prepare script. In the long term this will be added to the preparing-the-server docs we already have. I had to switch the default port to http-alt (8080). On CentOS 9080 is registered for ocsp and getting it to work for apache without hacking SELinux is hard. I think 8080 is the RFC way to go anyhow. If anyone want to override this it should be rather easy using the --web-port arg and by hacking Vagrantfile. The PyOpenSSL code has been refactored for all the distros that the Vagrantfile now supports. As far as my checks go, I tried this code with all the distros, uploaded a track and downloaded a unicode and a ssl podcast and was able to listen to them in each case. In the experimental CentOS case, the UI is not up to spec since services need to get scheduled through systemctl and the status overview (ie. on the /?config page) do not work properly. They need to be as follows: ``` sudo systemctl start airtime-playout sudo systemctl start airtime-liquidsoap sudo systemctl start airtime_analyzer.service sudo systemctl start airtime-celery.service ```
2017-03-08 12:39:59 +01:00
[Unit]
feat(worker): load config using shared helpers BREAKING CHANGE: The worker `RMQ_CONFIG_FILE` environement variable has been renamed to `LIBRETIME_CONFIG_FILEPATH`. In addition the systemd working directory for the worker has changed from `/srv/airtime` to `/var/lib/libretime/worker`.
2022-02-22 20:03:31 +01:00
Description=LibreTime Worker Service
feat: add systemd libretime.target - add wanted by - instantly start services in vagrant
2022-05-08 19:20:03 +02:00
PartOf=libretime.target
Vagrant Debian support (and experimental CentOS) This changes the Vagrant setup to support multiple installations as multiple boxes. In addition to Ubuntu Vagrant can now be used to install on Debian as well as on CentOS. I took the chance to clean up the .deb install a bit and backported analyzer and celery to SysV proper so it runs there. Some of the distro specfics were moved to the install script from the python setup scripts to acheive this. For the CentOS support I added a rather involved OS prepare script. In the long term this will be added to the preparing-the-server docs we already have. I had to switch the default port to http-alt (8080). On CentOS 9080 is registered for ocsp and getting it to work for apache without hacking SELinux is hard. I think 8080 is the RFC way to go anyhow. If anyone want to override this it should be rather easy using the --web-port arg and by hacking Vagrantfile. The PyOpenSSL code has been refactored for all the distros that the Vagrantfile now supports. As far as my checks go, I tried this code with all the distros, uploaded a track and downloaded a unicode and a ssl podcast and was able to listen to them in each case. In the experimental CentOS case, the UI is not up to spec since services need to get scheduled through systemctl and the status overview (ie. on the /?config page) do not work properly. They need to be as follows: ``` sudo systemctl start airtime-playout sudo systemctl start airtime-liquidsoap sudo systemctl start airtime_analyzer.service sudo systemctl start airtime-celery.service ```
2017-03-08 12:39:59 +01:00
[Service]
feat: systemd service hardening (#2186)
2022-09-27 11:51:17 +02:00
NoNewPrivileges=true
CapabilityBoundingSet=
PrivateDevices=true
PrivateTmp=true
PrivateUsers=true
ProtectClock=true
ProtectControlGroups=true
ProtectHome=true
feat: extra systemd service hardening (#2197)
2022-09-27 13:17:43 +02:00
ProtectHostname=true
feat: systemd service hardening (#2186)
2022-09-27 11:51:17 +02:00
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
feat: extra systemd service hardening (#2197)
2022-09-27 13:17:43 +02:00
ProtectProc=invisible
feat: systemd service hardening (#2186)
2022-09-27 11:51:17 +02:00
ProtectSystem=full
feat(installer): rewrite install script - remove unused root packages.ini - write config to yaml file - allow to set public_url during install - force icecast start right after package install - move config file in place at the end of installation BREAKING CHANGE: The bash installer has been rewritten, the flags and options changed, please run `./install --help` to get more details.
2022-05-23 17:16:02 +02:00
Environment=LIBRETIME_CONFIG_FILEPATH=@@CONFIG_FILEPATH@@
feat: systemd service hardening (#2186)
2022-09-27 11:51:17 +02:00
Environment=LIBRETIME_LOG_FILEPATH=@@LOG_DIR@@/worker.log
feat(installer): rewrite install script - remove unused root packages.ini - write config to yaml file - allow to set public_url during install - force icecast start right after package install - move config file in place at the end of installation BREAKING CHANGE: The bash installer has been rewritten, the flags and options changed, please run `./install --help` to get more details.
2022-05-23 17:16:02 +02:00
WorkingDirectory=@@WORKING_DIR@@/worker
feat(worker): load config using shared helpers BREAKING CHANGE: The worker `RMQ_CONFIG_FILE` environement variable has been renamed to `LIBRETIME_CONFIG_FILEPATH`. In addition the systemd working directory for the worker has changed from `/srv/airtime` to `/var/lib/libretime/worker`.
2022-02-22 20:03:31 +01:00
fix(worker): enable logfile variable expansion in ExecStart (#1717) Reenable worker log file. Related to e5385b0dac89a5e24b4373740f19f97aa8a61cdb
2022-03-29 14:15:26 +02:00
ExecStart=/usr/bin/sh -c 'celery worker \
feat(worker): load config using shared helpers BREAKING CHANGE: The worker `RMQ_CONFIG_FILE` environement variable has been renamed to `LIBRETIME_CONFIG_FILEPATH`. In addition the systemd working directory for the worker has changed from `/srv/airtime` to `/var/lib/libretime/worker`.
2022-02-22 20:03:31 +01:00
--app=libretime_worker.tasks:worker \
--config=libretime_worker.config \
--time-limit=1800 \
--concurrency=1 \
fix(worker): enable logfile variable expansion in ExecStart (#1717) Reenable worker log file. Related to e5385b0dac89a5e24b4373740f19f97aa8a61cdb
2022-03-29 14:15:26 +02:00
--loglevel=INFO \
--logfile=$LIBRETIME_LOG_FILEPATH'
feat: systemd service hardening (#2186)
2022-09-27 11:51:17 +02:00
Restart=always
feat: use dedicated 'libretime' user BREAKING CHANGE: The default `www-data` user has been replaced by a dedicated `libretime` user to run the services. Be sure to change the ownership of the libretime files.
2022-07-06 16:21:40 +02:00
User=libretime
Group=libretime
Vagrant Debian support (and experimental CentOS) This changes the Vagrant setup to support multiple installations as multiple boxes. In addition to Ubuntu Vagrant can now be used to install on Debian as well as on CentOS. I took the chance to clean up the .deb install a bit and backported analyzer and celery to SysV proper so it runs there. Some of the distro specfics were moved to the install script from the python setup scripts to acheive this. For the CentOS support I added a rather involved OS prepare script. In the long term this will be added to the preparing-the-server docs we already have. I had to switch the default port to http-alt (8080). On CentOS 9080 is registered for ocsp and getting it to work for apache without hacking SELinux is hard. I think 8080 is the RFC way to go anyhow. If anyone want to override this it should be rather easy using the --web-port arg and by hacking Vagrantfile. The PyOpenSSL code has been refactored for all the distros that the Vagrantfile now supports. As far as my checks go, I tried this code with all the distros, uploaded a track and downloaded a unicode and a ssl podcast and was able to listen to them in each case. In the experimental CentOS case, the UI is not up to spec since services need to get scheduled through systemctl and the status overview (ie. on the /?config page) do not work properly. They need to be as follows: ``` sudo systemctl start airtime-playout sudo systemctl start airtime-liquidsoap sudo systemctl start airtime_analyzer.service sudo systemctl start airtime-celery.service ```
2017-03-08 12:39:59 +01:00
[Install]
WantedBy=multi-user.target